VulnerabilityModified
CVE-2008-5117
Open redirect vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
MEDIUM 6.4EPSS 2.57%
Does this matter?
Lower severity and a low EPSS score (2.57%). Track it; it rarely justifies an emergency change on its own.
Description
Open redirect vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P
- EPSS
- 2.57% probability · 84th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- sun/java system identity manager
- Source
- cve@mitre.org
References
- http://osvdb.org/49768
- http://secunia.com/advisories/32606Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1Patch, Vendor Advisory
- http://www.securityfocus.com/bid/32262
- http://www.securitytracker.com/id?1021170
- http://www.vupen.com/english/advisories/2008/3128
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46556
- http://osvdb.org/49768
- http://secunia.com/advisories/32606Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1Patch, Vendor Advisory
- http://www.securityfocus.com/bid/32262
- http://www.securitytracker.com/id?1021170
- http://www.vupen.com/english/advisories/2008/3128
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46556
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.